CVE-2024-41771

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-41771
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose application logic or other sensitive information.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/pages/node/7184663 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:*:*:*:*:*:*:*
History

07 Mar 2025, 19:37

Type Values Removed Values Added
First Time Ibm engineering Requirements Management Doors Next
Ibm
CPE cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:*:*:*:*:*:*:*
Summary
  • (es) IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3 y 7.1 podría permitir que un atacante remoto descargue archivos temporales que podrían exponer la lógica de la aplicación u otra información confidencial.
References () https://www.ibm.com/support/pages/node/7184663 - () https://www.ibm.com/support/pages/node/7184663 - Vendor Advisory

03 Mar 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-03 16:15

Updated : 2025-03-07 19:37

NVD link : CVE-2024-41771

Mitre link : CVE-2024-41771

CVE.ORG link : CVE-2024-41771

JSON object : View

Products Affected

ibm

  • engineering_requirements_management_doors_next
CWE
CWE-522

Insufficiently Protected Credentials